Lucene search
+L

6 matches found

BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•18 views

The vulnerability of the str_rot_pass function in the PHP-Proxy web proxy script allows attackers to disclose sensitive information that should be protected.

The vulnerability of the strrotpass function in the PHP-Proxy web proxy script relates to the ability to read encryption keys without authentication. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS7.1AI score0.01132EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2018/12/03 9:53 a.m.•19 views

Local File Inclusion

php-proxy-app is vulnerable to local file inclusion. The vulnerability exists because strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php uses a weak cryptography to authorize data...

7.5CVSS7.2AI score0.01132EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2018/12/03 12:00 a.m.•53 views

PHP-Proxy Weak Encryption Vulnerability

PHP-Proxy is a web-based proxy script featuring fast, easy customization and the ability to provide support for complex websites such as YouTube and Facebook. A weak encryption vulnerability in the strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy versions 5.1.0 and...

7.5CVSS6.6AI score0.01132EPSS
SaveExploits1References1
OSV
OSV
•added 2018/12/01 12:29 a.m.•12 views

CVE-2018-19784

The strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion...

7.5CVSS5.8AI score0.01132EPSS
SaveExploits1References2
Prion
Prion
•added 2018/12/01 12:29 a.m.•18 views

Authorization

The strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion...

5CVSS7.3AI score0.01132EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/01 12:00 a.m.•6 views

CVE-2018-19784: Inadequate Encryption Strength

The strrotpass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion...

7.5CVSS7.2AI score0.01132EPSS
SaveExploits1References2
Rows per page
Query Builder